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(54) INTERNET RELAY CONNECTION SYSTEM 

(57)Abstract 

PROBLEM TO BE SOLVED: To achieve high level security at the time of 
authenticating a terminal connected from a home communication network 
to the Internet by dial-up. and an IP address is assigned according to the 
connection. 

SOLUTION: An IP sec tunnel is set in a communication path in the Internet 
communication network so that the secured communication can be 
performed through the IPsec tunnel between a home communication 
network and an authentication server communication network. Moreover, 
authentication strength can be enhanced by the two stages of the IP level 
authentication of the IPsec tunnel establishment and the personal 
identification of an information server access, and a consumer can be 
specified from the IP address according to the linkage of an authentication 
server GW, an IP level authentication server, and a personal identification 
server. The consumer information can be acquired from the access IP 
address by an information server. 
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(54) B8M<o«»] >f>3^-*y h«t»3|ia8BWf^ 



(57) imm] 

mh(r>f^\z. \ Ps e c hy^v^tci^-fer^^T/c^aff 
1^-^^. fiA^SEf— -'^(OigaSfr J: , I PT Ku;^;5i^ 




(2) 

1 

h33yu (I p, internet protocol) \Zf!$U-t^T 

^I^GW (Gate Way) 

/-^iiift^ (CSN. Certified Server Network) 10 
II-!^-/^GW (Gate Way) h^m7LtL-( ^yf-^y 

'''SGWirorai^^, I P s e c (internet protoco 

1 security) h y^vHriSSrS^SSrli^fc ^ i 

Ift^Jl 2 1 ME I P s e c h l^^MtO S I (open 
system interconnection) ^ 3 Jf 1'^^ $ tlfcflt-§-(kii 

— ^ I PT K^:^5:y— yl-LTio< NAT (network ad 
dress translator) m^\-y^J\^t^Wi'&^irifz. 
t#IC^:roNAT^S»C7'-/ULTfc5y7'<'<- h I 
P T K u;^ Iriiff |cM*35tflfE^rtaff i^lcM-tSS* 

Lfc;iScTHuEl P s e c h >'^y^^:^^LT>^^H^:i-5Sg 
Srff 5 ffl A^tHJ— J; tJf i'iS co^aSrtr 5 D 

NS (domain name system) 1^— -'^^^i^^ < 

ot^. BiilE<@AlgEEf— ^^l±<BAIgIiESrlltf bfcS* 

BtflEDNSf— tflfi^^SS-rS^^ 40 
(ID) . SiiE©;tS!iWPS, tiiO!-!)— • *x=f!J 

^f— /<;05^|EiS*(D-o;!i^ lb r ir ;^ ?rSl-t i: # 

H{[|S:/7'f h I PT Kw;^5r^-i: LTfigv^-a-*^* 
Srffp^Si:, r©Ra^^-g•fc^i:^C*^LT«rlE^@A^SE■!^ 50 
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2 

icSii ^ tbfc-t © M-r 5 if a ^ ^: Pb^ V ^-a-ip 
I»*3i7] H^^E^@Aig^SE1^-^^lt. mllEDNSf— 

[it*:S 9 J HutB!ffi*(c(±Hufe<@A®II-!^-^-<lw^f)- L 
Hf— /N' ci « r O I ^-a-^^■y: (::*f L TM«ffi ^Jj;«:i- 

[f^*:«io] irEfiA^aEi^-^<l-«> ^SE'f'lwfc 

im^mi 1 1 mFE<@AK<iIf— /^(il4. iSliEcf'Cifc 

f> H T T P (hypertext transfer protocol) IC J; 5 T 
«i-S#SSr<i;tfc»*:«4fE«»^'>'^'-;^s/ H>fi^ 
[000 1] 

14^ IP (internet protocol) Jil iSiifffOirdra. y 
X'f (IPsec, internet protocol security) 

^(DT KU;^3Ei^l (NAT, network address translat 
ion) (cMf'So 
[0 0 0 2] 

m^<r>^m] -O-^-^ry K^»aicJ:t)> -O^- 



3 

[0 0 0 3] rofcfcfC. 4>'$'~^-y htsXm SP 
(internet service provider) SrSi LfcffiSiSi: jW^'t'" 

S L (secure sockets layer) ;45^ t)i^T V'> 5o S S L (4 
m'^Mmitrnm d so (c£*:)t>4x3tOS I (open sy 
stem interconnection) IS 5 

[0 0 0 4] 

ffi«*i*^coft(7>f— fc->!. SrSit S r t :a5T-# .5 J: ? 
[0 00 5] ^coi 5 T'^T Kw;=!.icov^Ti4, -tor K 

[0 0 0 6] *^BJ(4, rwi 9^iW^lCfT*:>jT.fctC> 

^B^ld:. wWi5?'iir^3.yr^'$r^{li-r5iir'blc, 
S:SE»a*Sr±tf 5 r t 5 tf mg^igg^^^C;s^tiW■r 
ii(S(D!£:v||;6S/jVN, V^i^^^5 S S O (Single Sign On)•^^ 
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»^Srwa-rs w t A>xt 5 4'i^g^igg;^s:srS#t-f-5 - 

[0 0 0 7] 

y^iCi: ►) i^^— ^ h . h (I p, internet 

protocol) {z.mm-r6Th'U::^tiH^^ti^ 

mt(Dmm^limifhntz^fHGW (Gateway) ^ 
^^— /<aft^ (CSN, Certified Server Network) i: 

Buie-i' :/^5' 2/ h aft ffl i oig)^,^(c^tt t-Hfe^^EE 

f— ^^GW (Gateway) t Srffixfc-I' ^'^-^-y h -^^^ 

IBsErtGWtHutE^ilf— /<GWir(DW(^. I P s e c 
(internet protocol security) > >^/I'^S^'t"'5^ 

[0 00 81 Itrffi I P s e c h V4i/Uf40 S I lopen s 

20 ystem interconnection) H 3 gtCfS^^tlfeBt-^fliffl^t 

s I B 3 1 u-<ji'X(om^{min:ff^^mm^z ^tic 

^ ^mm-r S r i: ;45^tg (c 5 „ 

[0009] $fc. VPN (Virtual Private Network : 

^\HmiBmtmm-t-y<miEmt(Dm\c i p s e c 

ildj; 19. ElEf— ^^a^tfflrt(?5•t^- 
^<t'F#^#l^(0^^^afS^(^ro«mi:OI P-VPN 

[0010] ^hic, IPsech >^^^l-m±(D I P U 
^/V-^IE t tS® A^vlIcD U4^(Dm 

;^ii#t^nltgi:1-?). 1-/^*3*,. ffilEEf— /^GW, I P 
w-</wmiIf— 1@AM-EEf— ^^coa^diij, IP 

T#fcl PT KU^/4>P)^— t>-'W«^SrSi#-t-5rt;dS-e 

[0 0 11] -t-7ii:>1b, ;*:^eg{±. «5|5tWgif— 

K(end to end)am(Cioft-5«*i:^f«1^-^■<i:C0WC> 

amsrtT5fc*<oT Ku;^fijaftjif, I p i^^ji^mmt 
mmx(Dmxmm'!i^m<D'§mmm. \m-^~^<i^T^-^ 

50 [0 0 12] ME^iEf— ^^GW»4, ^mWT'y-r-i- 
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MPT KU;^5r7'-/WLTfc< NAT (network addr 

ess translator) I P s e c h i^^jUH^W^^ 

iilB^iEf— ^^iffirtof— /<*-feSiJJfc-t-5 

Lfc;!i5o-CfriE I P s e c \-^.y^-)V^'k\.xn^<t'i>^ 

[0 0 13] miS^IIiJ— /^iiftiP^'f'tc, <@A^iE5r 

n 0 ^@ A^^iE^^-/<t5 i TJ« K ^ 'C (O^gm^n 5 D N 
S (domain name system) '^—''^^'J^fj:<. ti> — O'f'O 

[0014] mm^m-r?>^m:ni. =^—fm\^ ( i 
D) . munm^mm. ax-c^-^-if:^ ■ ^T^d'ywfli 

[00151 miB^iiEf— /<afS^ (C S N) I^ClfeS 

-orolf $gf— y<:aSmiEffi*o-o;i^ T iJ' ir ;^ (t 

e)tlfcin57'7^'<-M PT Ku-y^Sr^-i: LrPcav> 

[0 0 16] B^fB<@AK^EEf— /^f4. HufSD N S 

1@AEtE^^^^i^TLfca*(iS1-Sl*#SrHiJK^-r 
5S*Srfi^5^aSr#*, MIEDN S1>— /^{i, SgES 

[0 0 17] irK!ffi*ic(4, mmmAmmi)—^<-A^h<r) 

[0 0 181 B^IB!ffi*^-l±m)EeA^tI1^-^<^c*fLT 

■9— (4 r Pn^ V ^•^^^-ti:(c*l• L Ti?iiE4^ffi Srl&^-r 5 
^® 5r« ^ S w t a * U V \ 
[0 0 19] HufBffiAKEi^— •'^icii. mSE-f t-foSiffi 

[0 0 2 0] H^nBffiA^i^Ei^-^^^C{4, MIE4"(cfe5« 

[0 0 2 1] HuS^IEf— ^^GWlCJi, -0(04S*i6»f> 
H T T P J; 5 T ^ -fe ;^ $) o i: t c: ^ A 
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[0 0 2 2] 

m^mij^nm^^im i ^^m \^xmmi-i). m i (i* 

[00 2 3] :^^m\t. m 1 l-^-r i 5 ^^^-r Tv-i^T 

tl.5«l*Jiiffl«l3 0 t:/a-/VUT VUMZii'O ^ 
h]aft«2 0i:K«fi^i^^{c|S(tt5ixfc^rtGW2t. S 
8!L-f57°7'r^- h I PT KU';^liJ: ti^JtWStLS^IE 

•t-/<aftffii 0 t-o-^-^^y hmmm2 o tro^i^ 

20 [0 0 2 4] irT\ *iigBJW!|#|i!(i:i-5ir5{4. ^ 
GWlir«W(C, I P s e c I-v4^yU4 OSr^S-rSt 

[0 0 2 5] ^iEf— ^<GW1 (4, #ic»7°7-r'<- h 
I PTKw-;^Sr7'-/H.-C*5<NATffiill5Sr«x:. I 

P s e c hy^-/U4 0Am^^tltztt\C^<DNATm 

mdi^i^—ji-Lxh^yy^^- y i PTKu-x^iim 
{cM*35^rtafsai3 oicjsi-5Sjg5i?3{c:fij?)a"9, ss 

30 *3A^ib?lJ5l5-t5fflft^N^-7 h?r^roaff^<^y hF*iIC> 

1 OF^o^-f— /^|;i7W-7^^>'^^L, K^|I1^-^^aft;P 
1 0rt<D^f— /<;i.f3PJj|5-f-5affi^<-{r-> bs-troaffi 
/n'^.;, hfy(D^X^T Kl/>^t^L/c7!iSoT I P s e c h 

y^fVA o^i\-\^xn^^-rh^M^j^^-7- ^ i^if-r^, 

[0 0 2 6] ^aEf— ^^aft^l OrotfUc, iiA^SESr 

5 mAmm3—''< e jo i t>* kp« -y c>i=s^tf 5 d 

NS (domain name system) if— 7 Sr^^<C < i: fc— <5 
■rr>^h-. iiAmf— ^•<6(4^BAMiEt•|I^Tbfei«* 
40 ro::'--f'jta<^DNSf--/<7(C§ltiSL. DNS1f— 
^^7(4^(D3.-Hfit^^^®i-5, -<DSfit(C(4, 3-- 

f-'SSSiJ^ (ID). mUnM^mWis ioiu^-t^— t-;^ • 

[0 0 2 7] \pu-<;\^mmci:^iE^m^mm:^ni> 

I P s e c Vl^^-^l'A OSraitL. ^©MfiAi&II 
if-/^6{c:J:!J<BA^iiE?rfirp. <BA^tEif-/^6f4N 
AT^IgSlCi ^*A'OUhtltz-yy-^^~ V I PT 
;^T'fo5T:J'-fe^7c (^) I PT K^^5r=¥— CiigaEf- 
-/■^GW KC I P U^/l-K.llroa.— ^^•^Pp^v^•^^^-l^:■5o 

50 mAmm—^<Q\t. ^(nm^^^i^^m^tn^xm^ 
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^ttSr^lE-rSo DNS1h-y^7tC*tLTT^-fe 
:^7c (^) I PT K^:^Sr^-i: LT K^-rxca— 

ID. ^'^^H^O^— !f1faS:igffiLDNS©^g^?: 

ItTi^-tTsjt I FT K^;^^=^^-(^DNS•t^— 

[ 0 0 2 8 ] fiA^IE-y— ^< 6 fi. DNS1^-^<7li, 

10 0 2 9] a*3;c(i, fiA^IEIJ— /<6i4»P5dmiI 

[0030] a* 3 {±fiA^SEf--^< 6 \zM Lxmm^ 
[00 3 11 eAMSEf— /<6tcfi, mm'pich^m^ 

[0 0 3 2] fiA^IEf— ^< 6 (i, |giE4'(-fc5«*3 

[0 0 3 3] SiE1^-/^GWl^S, -O(0«*3yJ^e»H 
T T P (c J; 5 T ^ -fe ^ o i: # roig* 3 ro^® A 

(0 0 3 41 mnz7r:i-^y hu-irmi$.mi:^mLx 

y:=^^^W\zmm-ti>t. «5l53(C7°y-r-4- M PT 
KU';^^ft-fy1-5. 4ffi*3r±y'ri'/wT5/ys*-e'i'v 

h^fcfil SP (internet service provider) 
LTKIEf— ^^GW 1 '^^M?rS*-t'5„ I P V 
^j\^mU-f~^^ 9 G W 2 ^^liE L. mWy'W^ h 

tl?) b^\HGVf 2 t^Ef— /^GWl t<DmXI P s e 
c h:/^/U4 O^rttlt-fS^ MliE1^-^<GWl(4-f':x^^ 
-^yhifcrtl SPSrSftLTg^1-5iia*3 5r^lE 
1^~/^iifS«3l 0T-^=-^(ift5fc«!)t-NAT«ltg5 
€r*-t-5, NAT«tg5T'ffiffl-rSNAT3:v h yx- 
y/KCjoV^-ca*3(?3«A^fI^ic^Srta■t•5o ^rtfi 
fi«3 0, ^lEIJ-w-Cjaft^ 1 Qfy(t:fy^-<- h I P 

7 vi^:^izi<omm^m\ jffi5i5 3ii^fcroEii-9— /<a 

ftPl O'^Ti^irx^jS^^-f h I PT K 

u-;^2r«*3|c:tiJt)ST5. I P u-</i'^liESrtTofc 
<@A^iE-i*— /^6«:3.— tF»<@ASIiESrfT5<, mx 



(5) #PB 2002-208965 

8 

I P^'<-'U^iiESrtTofc^i^GW2(0®Sim^S: 

^.uf— /^Gwi ;4^p>®#L I p i^^/i^mutmxmM. 

(DM#,(DEatt*^=-;/i^1--5„ I P u-^^Hgil, fliA 
m-U^not I P U-i/ufgaEi^-^-^g tiiASSEEf— /< 

6 ttii^ UD N S f— 7 ICT if -fe :^ Lfca.-- f if 
Sfi^L, 1t«-f— ^<8 ttDN Sf— A 7 
fTV\ ^-ifffi«*©#-t-5. fiA^BEi^— 6 f±<B A 
^liE<0^Rffi?r«*3--ii^U. «*3f4ffiAiS.fEf— /■? 

6--|gIiE4^ffi(7)Bgv^-^^^^i■5r^T5o fSiE1^-/-<GWl 
10 ^aAE!ESr^ToT^^/.ev^;©-g•ii|±, fiAKIEf— 

6tcfiAiBSE^ffii-„ 

[0 0 3 5] iilT. *^B^*ii#iJ^^t>irf¥*ffllitttPJi- 

5o mi^^MLx. *^i£0iJf4^i*3a«ffl3 ortroiffi 
*3, %rtGW2. ^iiEi^— /<aff ^ 1 op^nmts.'^— 
^<GW 1 , I P 9 ^ ^BAKIEf— 

6. DNSf— y<7. If 8 ^-^tf, 

[0 0 3 6] ^— !f{4iffi*3^Sf^LT^I^GW2Sr:fh 

P (internet service provider) LTK^iI1^— 
20 iiflffll OlC^il-rSo /^GW1(4, ^rtGW 

2 i©^T- 1 P s e c h y^/U4 0 ^fit5i-f ■5., lEEEIJ- 
-/•?GWl[4NATiiStl5?r*L. * fciffi* 3 ^^SE1^ 
-^^iiftPl 0F*3-e3-::^-i!' 5 fci6(;07'7-r-<- h 

I PT Kw;^^^— /w-f 5„ I P U^/USBEf— /•< 9 
^SEf— ^<GWld^bro^tES*|w*fLi)S*3 t I 

P s e c 0 (D^^Li:^ 0 tzlt(DWM^ff 0 , 

iSA^tEf— ^< 6 (4. I P u-</i^^iISrtTo;fc^3.— If 
iBA5r®liE-f 5o DNS1^-/^7^4, ^-iftt#^<*i# 

1-5, ^-ifit^(4. ip\^-<;i^mm-9—^<9tmAm 

StiJI^-r^i. If Sf— 8 i4mif-/^aft« 1 0(C 
SiiLL;t3.-if(OSffi*3tc:«Sl?rlt«t-f-5„ ^f«1^-/^ 

8 (4T -fe (O fe o fcffi* 3 t N A T^fg 5 iC i D »! "9 
Mhtitcyy-<^—h I PT Ku^SrDNSf-— /<7lc 

[0 0 3 7] mz. mi^£\'^Lm5i:»mLx^m^m 
<r>m'fiz-z>\,^xmm\zm,mi-?>. iii2(4^rtGW2 tm 

fE•^^-/<GWl tCOPH^(C15t3i§ttfc I P s e c hy^/\y 
(DWbtmxh^o S3HS^£5^S' M7-^'raSrteai$ 
40 tu?)^'?^-^ h«T KWy!.#-%-4^aSrS%-ri2lT-fo-5o 114 
(4<BA^aE■!^-^<> DNS^^-/<, If ^1^-/^lBSr^O 

y Y'^mmmis^n^^i^mfim'^^^^-tmxh^. 

[0 0 3 8] ^[^GW2f4. :^-fi>m\'^-ri>^%Z\Z 

I S P i !5 ^nw«;H PT Ku:x;JSfi] (Jg 
t>ix?)o ^iE1^— ^<GW 1 (4, 3J:(^lPsec h 
y^-^UfiftT-^ffll-^^^n— /</H PT Ku:^i:^F*30 
«*3Sr^aEiJ— /^iiftiffil Ortt?^=-^tc:&5fc«) 
50 7'7-Y'<- hT KU^STT'-zW-tS, ^rtGW2{43.- 
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■^f©^^s*3*»e)ro^liE^^-/<a^t»3l o^roitsf— 

GWl rfl{C^n-AyH PT Ku;^Sr^fflLfc I P s e 

[0 0 3 91 ^fiE1^-^•«GWl^i%rtGW2 t I P s e 

c h y^/U4 0 (Og^i^Bl5§:, I p U^jumMsE-9—^< 9 
tcPp^v^-g-i^-arSo I P u-iyi^^lElJ— 9 (i. ^rtGW 

2ro^iE*ffV\ ^I^GW2 t^iE1^-^<GWl troPfl 

I p s e c h>'^/u4 0(75^a:ni5§rJ?::ig:-r?)o ?tlz: 

Blro*-g-(;:(±^rtGW2 ir^fiEf— /^GWl tWffiT-^^ 
n-/VH PT KW^€r^fflLfc I P s e c h^^^>/P4 
0^^^^t2:1-S„ 

[0 0 4 01 I P s e c hy^^;U4 OSrttiEi-?) 7° 
— y^LT$)5BiiE1^— /^aftPl Ortcyy^r-^— h I 
PT KW';^Sr§J9SS, ^EE1J— /^GWlli. NATffiS 

-<-M P7 Ku><.SrWS1-5r iT'^x— ifc)jg5K3S: 
MEf— ^^aff^l OrtT*3.=-:J'i:1-5„ NAT«6«g 

5T'(± I p s e cm^mm^^ntinfc'&mmm\cmA 

[0 0 4 11 NAT^IfeSWNATaii^ h y^f^X-Wa 

[004 21 ^-COlBAffiiiEf— ^< 6 14. ^Kf— v<GW 

1 ta^LT I P ^-<^^^^iI(7)|iSlJ^ffStfliAMtEOiS 

(wSi]i9SofcEiE1^-^<aftPl 0rtCi7°7-l''<-H 
PT Kl'y^Sr^-lfSt LTDNSf--/-?7|c:<HAro^ 

m-r?>c iiA^iEf— y<6(4fflABiiSrjEm(-=?fofcr 
t^riJiEf— /<GWl'^a*PL, ^SE-t^-^-^GWlfiN 
A T«tg 5 T-^ffl1-5 N A T ^ > h y tf #T'<@ AMiI4^t 

'>.OT^'-fe;^Br??5:i|^iJ^-f 5c, Ti?-fe:;^R^T•fei^^^3.- 

1^*l-^*f81^-^^8'^«T^■fe^^ffFL, 

3.-if tcT ^ -fe ;^ Srms Lfc r t ^a»i-f-5„ 

[0 0 4 3] fflA^Hf— 6 (4, mAmm^n^^Ti' 

^^iim'^^titc^i: 3 tca*n1-5 . . Jgjfe 3 «{i 

6^tc<®A^>tiEf— 6 tcRg^/^■&^^■^^, iBAa^SEf— 6 
t^'ttUcm^-r^ r i T-«* 3 *3 J: tJ5fiA^>IEf— 6 
LT®IK^S<DtiS5Sig^tT 9 „ PAliSEf— ^< 
6l4«5fe3yi^^<o^iiE^^ffiPp1v^-a-i:'i3:(-J:9, ^BEtt^ 

[0044] jBjS 3 ^^^jSiEf— ^^aftffl 1 0 fHoy^m 

L I P s e c h V^/l/4 OSrffifflLT^iiE-!^-/<GWl 
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M4, K^>^f44S*3ro^F^affi^3 0ro7'7-Y'< 
- hT ^T K^;^l4^fS1^-A8©®;|iE^^-^< 

aft^l 0rt(O7°7^'<— h I PT K^;^T-.fe-5o iSIE 

■^LTSlOfflU NATlitl5©f=ai§^(CL^;55v\ 

^T Kw;^Srffl*3ro^rta{t^3 OrtcDT^y-f-i- h 
T Kv;^*^b^--^;'£BiiEf— ^^affi^i 0[H(O^y 

10 [0 0 4 5J If^f— /<8^^P,S*3--(D/N°<y5/ 

KvEf— ^^GWl (DNATaHg5T'jt(OT Ku>«.#{t# 
;tSrm\ MiE^^-/^GWlT*/^°'}r•y hS:Bt-^*7*-fe/V' 
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